Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a623162313a3a2f34382d3438203d3e20323136303532.roa
File:                     326130363a313238333a623162313a3a2f34382d3438203d3e20323136303532.roa (raw, json)
Hash identifier:          nQC1xpU0WAo6UU1bWtDYCNPrGaChndzVJn8x0kvER9M=
Subject key identifier:   30:6A:96:C6:34:59:9D:BA:76:1B:BE:F8:91:BB:24:10:A3:EF:83:C3
Certificate issuer:       /CN=4807C118BD348934B5CC59B3E8A7A8C14F29C3FB
Certificate serial:       166181724AED1618C9F3F8A457592B69198B4762
Authority key identifier: 48:07:C1:18:BD:34:89:34:B5:CC:59:B3:E8:A7:A8:C1:4F:29:C3:FB
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a623162313a3a2f34382d3438203d3e20323136303532.roa
Signing time:             Fri 04 Jul 2025 16:08:41 +0000
ROA not before:           Fri 04 Jul 2025 16:03:41 +0000
ROA not after:            Fri 03 Jul 2026 16:08:41 +0000
asID:                     216052
IP address blocks:        2a06:1283:b1b1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 17:31:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:61:81:72:4a:ed:16:18:c9:f3:f8:a4:57:59:2b:69:19:8b:47:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4807C118BD348934B5CC59B3E8A7A8C14F29C3FB
        Validity
            Not Before: Jul  4 16:03:41 2025 GMT
            Not After : Jul  3 16:08:41 2026 GMT
        Subject: CN=306A96C634599DBA761BBEF891BB2410A3EF83C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:0e:65:74:19:6b:c2:01:63:e9:8e:e1:27:4f:
                    92:8e:7d:07:a8:91:5d:f9:0f:b1:49:2f:4f:6d:f6:
                    0a:a7:6f:61:3a:8e:34:8e:5b:6d:52:ab:11:82:90:
                    6c:ae:37:05:70:24:1b:c5:31:d0:a6:42:97:25:89:
                    cd:62:4d:0e:a1:14:58:80:73:cd:1b:92:4f:ee:b4:
                    78:a0:dd:4c:78:aa:c2:95:4e:d4:14:d6:25:95:14:
                    5f:46:dc:fc:be:cc:36:5d:d1:18:e3:9b:2e:f6:37:
                    31:bc:dd:5b:f4:90:68:53:24:a5:b2:be:70:e1:de:
                    09:66:b4:61:92:1c:ad:f0:6f:a7:fa:53:31:a5:ff:
                    bc:50:17:89:2e:79:bb:ff:ae:27:42:de:5f:18:a9:
                    e1:62:d8:89:52:2c:73:bf:73:5e:23:c2:4a:b1:bb:
                    71:a4:a1:40:27:43:9b:df:f2:5a:f1:62:1a:6a:d0:
                    d4:c5:94:d0:95:c7:a3:4b:8d:07:26:06:9d:a6:b8:
                    d1:fb:ab:00:27:b8:47:6e:4f:c2:02:87:03:0d:20:
                    63:ef:d1:54:f4:ff:2b:78:32:58:b5:e3:8e:f9:c6:
                    89:ee:1c:78:ec:a6:44:71:42:07:8b:67:43:00:d6:
                    76:e6:0a:9b:51:46:29:01:19:a5:82:f5:c5:8a:bc:
                    30:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:6A:96:C6:34:59:9D:BA:76:1B:BE:F8:91:BB:24:10:A3:EF:83:C3
            X509v3 Authority Key Identifier:
                keyid:48:07:C1:18:BD:34:89:34:B5:CC:59:B3:E8:A7:A8:C1:4F:29:C3:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a623162313a3a2f34382d3438203d3e20323136303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1283:b1b1::/48

    Signature Algorithm: sha256WithRSAEncryption
         83:a9:14:a5:5f:fd:a3:69:36:bd:f1:51:cb:a3:b0:b6:13:81:
         f3:dc:7a:f7:f4:b4:fe:6c:c1:93:9c:75:8f:79:21:e4:6b:1b:
         6d:6e:17:91:e4:7a:84:e7:a1:fe:2d:e4:20:d4:25:8e:48:94:
         09:37:c0:b8:49:93:0b:a2:95:87:08:29:05:a4:0c:ed:f3:a2:
         d5:a1:41:79:34:a8:36:01:fa:03:92:cd:25:65:ac:25:3a:6a:
         7a:a9:3b:f1:1c:17:32:54:37:9e:f6:52:b9:01:18:13:fd:9a:
         94:5b:6d:f9:dd:24:a2:49:40:73:ee:40:20:41:f6:2b:3f:ec:
         b2:46:c5:5d:82:0b:b6:23:fe:19:f4:82:86:f4:da:f0:e5:85:
         85:30:0d:ae:93:17:ae:52:d4:17:00:a5:73:c7:e0:f5:9c:50:
         0c:68:a8:e6:22:1d:af:16:43:4b:71:98:68:3f:82:96:38:79:
         7a:07:0b:21:ab:84:5e:0e:b1:eb:e9:2b:d7:50:e0:aa:71:d4:
         76:8b:41:a8:43:2b:36:20:a9:d8:d5:a6:b9:3a:47:84:54:9f:
         3c:28:09:36:3d:3a:b9:f4:ec:ea:63:d6:96:03:ba:5a:57:a9:
         61:bb:58:b7:12:6d:57:2c:d7:be:96:38:12:f2:49:d9:2c:3a:
         7a:97:31:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 08:43:26 2025 by rpki-client